Privacy Policy

1. Who are we?

Bluepeak.energy B.V. ("Bluepeak.energy" or "we") is the data controller responsible for the processing of personal data as described in this Privacy Policy. This policy applies to all our activities, including but not limited to our website, services, and communications.

• Bluepeak.energy B.V.
• Euclideslaan 55, 3584 BM Utrecht, The Netherlands
• Chamber of Commerce: 97646067
• E-mail: info@bluepeak.energy

2. What personal data do we process?

We process personal data that you provide directly, that arises from our services, or that we obtain through other interactions with you. This may include:

• Identification data; name, company, position, e-mail address, telephone number.
• Financial data; bank account details where applicable.
• Technical data; IP address, browser type, device, and usage data.
• Communication data; content of messages or correspondence.

We do not process special categories of personal data unless strictly necessary and with your explicit consent.

3. Purposes of processing

We process personal data solely for legitimate purposes:

• Service provision; performing our Energy Asset Management services.
• Communication; responding to enquiries and managing client relationships.
• Marketing; newsletters and invitations, only after subscription.
• Analytics; improving our services and digital presence.
• Legal obligations; compliance with fiscal and administrative requirements.

4. Legal bases

We process personal data on the following grounds:

• Consent; e.g. newsletters, cookies.
• Contract; performance of agreed services.
• Legal obligation; fiscal and administrative retention requirements.
• Legitimate interest; service optimisation and communication.

5. Retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected:

• Administrative and financial data: 7 years.
• Newsletter and marketing data: until unsubscription.
• Other correspondence: up to 2 years after completion of the matter.

6. Sharing of personal data

We share personal data only when necessary, with:

• IT and hosting service providers.
• Payment service providers.
• Competent authorities, where required by law.

Where applicable, we conclude a data processing agreement with third-party processors.

7. Security

We implement appropriate technical and organisational measures to protect personal data, including SSL/TLS encryption, access controls, and regular system monitoring and updates.

8. Your rights

Under applicable data protection law, you have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at info@bluepeak.energy. We will respond within one month. If you have a complaint, you may contact the Dutch Data Protection Authority at www.autoriteitpersoonsgegevens.nl.

Amendments

Bluepeak.energy reserves the right to amend this Privacy Policy at any time. The most current version will always be available on our website. In the event of material changes, we will notify you proactively where reasonably possible.